PT-1998-1241 · Inoculan · Inoculan
Published
1998-06-11
·
Updated
2017-12-19
·
CVE-1999-1555
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Inoculan version 4.0 before Service Pack 2
Description
The issue allows local users to cause the antivirus update feature to install a Trojan horse dll due to the update directory having "EVERYONE FULL CONTROL" permissions.
Recommendations
For Inoculan version 4.0 before Service Pack 2, apply Service Pack 2 to resolve the issue.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Inoculan